CompTIA Security + Ch 3

Configuring an OS securely, updating it, creating rules and policies to keep the system secure. This also includes removing unnecessary applications and services.

A group of updates, bug fixes, updated drivers, and security fixes.

A single problem fix, usually to patch critical security holes in a program or third party software.

An update to a system. Usually a small fix, larger patches are referred to as software updates, or service packs.

The planning, testing, implementing, and auditing of patches.

Planning- Decide if patch is necessary/compatible with other systems. Microsoft Basline Security Analyzer (MBSA) is a good program to use on the network to find security weaknesses.

Testing- Testing of the patch/hotfix on a "test" machine or machines, is a great way of making sure that no problems occur after they are implemented.

Implementing- If test is good, deploy the patch. This is done in the evening or over the weekend. Software such as Microsofts Systerms Management Server (SMS) or Windows Server Udate Services (WSUS).

Auditing- After implemation, check to see if the patch/hotfix has taken hold, then check for any changes of failures due the patch/hotfix.

To govern user and computer accounts through a set of rules. Used in Microsoft environments.

Groups of policies that can be loaded in one procedure.

The process of measuring changes in networking, hardware, and software.

Is the creation of a virtual (rather than actual) version of something, such as a hardware platform, operating system, storage device, or network resources.

Created by virtual software, they are images of OS or individual applications.

Virtual Machine software that allows multiple vitual OS (guest) to run at the same time on a single computer.

Type 1: Native- Runs directly on the host computer's hardware. Ex. VMware ESX Server, and Microsoft Hyper-V.

Type 2: Hosted- Runs within (or "on top of") the OS. Ex. MS Virtual PC, VMware Server, and VMware Workstation.

Enables the user to install the OS and the Service Pack (SP) at the same time.